The vulnerability in the script/cgi-bin/admin/setparam.cgi of the Vivotek IP7137 microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the /cgi-bin/admin/setparam.cgi script of the Vivotek IP7137 microprogrammed camera software is related to the failure to eliminate certain special elements during the processing of the systemntpIt parameter. Exploiting this vulnerability could allow an attacker, operating...

CVE-2025-66052

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "systemntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perform an attack. Due to CVE-2025-66050, administrative access...

CVE-2025-66052

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "systemntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perform an attack. Due to CVE-2025-66050, administrative access...

CVE-2025-66052

The CVE-2025-66052 entry concerns the Vivotek IP7137 camera with firmware 0200a. The vulnerability is a command injection in /cgi-bin/admin/setparam.cgi via the non-sanitized system_ntpIt parameter, exploitable by a user with administrative privileges. The issue is compounded by CVE-2025-66050, w...

CVE-2025-66052 Command injection in Vivotek IP7137 cameras

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "systemntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perform an attack. Due to CVE-2025-66050, administrative access...

CVE-2025-66052: Improper Neutralization of Special Elements used in an OS Command

Vivotek IP7137 camera with firmware version 0200a is vulnerable to command injection. Parameter "systemntpIt" used by "/cgi-bin/admin/setparam.cgi" endpoint is not sanitized properly, allowing a user with administrative privileges to perform an attack. Due to CVE-2025-66050, administrative access...